Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-32574
7.5
HIGHCVSS v3
Published
July 17, 2021
CVSS v2
5 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
HashiCorp Consul and Consul Enterprise 1.3.0 through 1.10.0 Envoy proxy TLS configuration does not validate destination service identity in the encoded subject alternative name. Fixed in 1.8.14, 1.9.8, and 1.10.1.
hashicorp/consul
GitHubConsul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.
GitHubConsul is a distributed, highly available, and data center aware solution to connect and configure applications across dynamic, distributed infrastructure.>= 1.10.0, < 1.10.1, >= 1.3.0, < 1.8.14, >= 1.9.0, < 1.9.8NVD